Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/uxEJcrkOegBfR_vYCCdl5fqYDVw.roa
File: uxEJcrkOegBfR_vYCCdl5fqYDVw.roa (raw, json)
Hash identifier: qkmt4yWcwABwvMSrMITRfTWYlAYWr4CM16tbvm/+kQ8=
Subject key identifier: BB:11:09:72:B9:0E:7A:00:5F:47:FB:D8:08:27:65:E5:FA:98:0D:5C
Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial: 01856F3013C491D0A71E25D87AE3A3F79200
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/uxEJcrkOegBfR_vYCCdl5fqYDVw.roa
Signing time: Sun 01 Jan 2023 21:14:59 +0000
ROA not before: Sun 01 Jan 2023 21:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40065
IP address blocks: 193.134.208.0/24 maxlen: 24
193.134.209.0/24 maxlen: 24
193.134.210.0/24 maxlen: 24
193.134.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:13:c4:91:d0:a7:1e:25:d8:7a:e3:a3:f7:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
Validity
Not Before: Jan 1 21:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb110972b90e7a005f47fbd8082765e5fa980d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:99:b1:33:20:a7:ec:f3:f8:b7:cc:e4:1b:ac:
a5:ce:18:ab:85:34:8b:5e:00:a3:8a:c0:df:55:4e:
d7:de:e7:29:a7:f3:92:04:5e:54:ad:5f:d0:7a:94:
2d:4f:67:31:15:b7:09:e9:c2:72:7b:e6:6f:3d:ba:
86:3d:31:dd:47:1a:f4:32:d4:b7:c7:32:39:e9:cf:
33:98:c3:b4:6d:29:b2:b2:64:3a:a2:89:26:47:f2:
02:4b:f2:cc:f3:41:3d:36:c6:0e:ad:e1:e2:04:b5:
1f:41:98:9e:fb:a0:6e:e4:8c:f2:ad:b7:a2:93:21:
b1:68:c3:d2:72:8b:b3:b0:54:d9:0e:15:59:6a:e4:
cb:7a:0e:b8:cd:3d:72:df:29:5f:66:43:16:c1:16:
73:04:e7:7f:e2:62:14:ad:cf:5e:c1:0c:28:4f:1d:
af:ec:51:1b:ae:12:d6:70:2d:8b:02:81:af:f4:10:
ea:5d:05:8e:4b:3d:a8:7a:48:49:47:da:d3:a7:9e:
09:37:8f:66:86:07:c8:87:1b:c8:08:e7:0f:b9:8e:
ae:4c:a2:c4:f8:9d:3b:ed:3d:ac:8f:7c:a8:4f:fc:
e5:26:e4:0d:3c:8d:95:3b:36:ce:2f:1f:15:b6:e9:
de:54:76:38:f3:d5:d8:95:ff:3e:09:8d:b4:04:3c:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:11:09:72:B9:0E:7A:00:5F:47:FB:D8:08:27:65:E5:FA:98:0D:5C
X509v3 Authority Key Identifier:
keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/uxEJcrkOegBfR_vYCCdl5fqYDVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.208.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:a4:3d:16:69:72:c7:e8:46:7c:89:47:0c:3e:55:10:dc:89:
e1:4e:a8:7e:76:bf:5e:ef:91:96:dd:e3:8a:c6:70:7c:43:3b:
96:96:93:39:1f:f3:93:d2:b1:62:47:d5:05:38:ac:b3:31:b9:
bf:33:c9:66:d3:58:0f:71:28:81:ab:86:c6:0f:df:94:ba:3e:
6b:50:73:67:1d:35:bd:9c:31:c6:c6:bf:70:91:00:7a:0a:44:
b2:53:f8:a4:1b:0a:13:f7:1d:c7:d8:2c:fa:2c:84:0b:21:32:
33:d5:0c:fa:d9:9f:12:ca:2e:19:3a:09:29:b9:48:4a:50:7b:
18:00:dc:f1:e9:27:b2:52:25:ee:dc:aa:ac:2a:66:7c:76:6f:
8d:d7:3e:71:33:7d:88:6f:fd:41:b6:4a:df:b9:d2:4d:a4:05:
3c:63:ab:64:06:6f:15:65:5b:db:ef:e9:b3:07:74:0c:7c:fa:
46:e6:1c:ee:72:64:75:ab:8c:ba:00:e5:83:e4:d0:57:69:55:
be:1f:de:e9:e9:01:8f:44:f2:62:aa:55:d5:5a:09:45:e7:4b:
43:07:ca:84:71:2a:75:39:66:ae:b8:d0:57:dd:34:15:fa:50:
cc:9f:37:f5:dc:54:2e:29:31:d8:c4:00:62:ac:fe:d6:e2:47:
3b:9e:70:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvMBPEkdCnHiXYeuOj95IAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzI0NWQwNDkyZWVkZTU5YjA0NWI1YmUxZmQ0ZWI5MTYx
YmM0MTcwHhcNMjMwMTAxMjExNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjExMDk3MmI5MGU3YTAwNWY0N2ZiZDgwODI3NjVlNWZhOTgwZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75mxMyCn7PP4t8zkG6ylzhirhTSL
XgCjisDfVU7X3ucpp/OSBF5UrV/QepQtT2cxFbcJ6cJye+ZvPbqGPTHdRxr0MtS3
xzI56c8zmMO0bSmysmQ6ookmR/ICS/LM80E9NsYOreHiBLUfQZie+6Bu5Izyrbei
kyGxaMPScouzsFTZDhVZauTLeg64zT1y3ylfZkMWwRZzBOd/4mIUrc9ewQwoTx2v
7FEbrhLWcC2LAoGv9BDqXQWOSz2oekhJR9rTp54JN49mhgfIhxvICOcPuY6uTKLE
+J077T2sj3yoT/zlJuQNPI2VOzbOLx8VtuneVHY489XYlf8+CY20BDxAvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLsRCXK5DnoAX0f72AgnZeX6mA1cMB8GA1UdIwQY
MBaAFDlyRdBJLu3lmwRbW+H9TrkWG8QXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEt
YzQ0MmExOGYxZWZjLzEvdXhFSmNya09lZ0JmUl92WUNDZGw1ZnFZRFZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEtYzQ0MmExOGYxZWZj
LzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwYbQMA0G
CSqGSIb3DQEBCwUAA4IBAQAepD0WaXLH6EZ8iUcMPlUQ3InhTqh+dr9e75GW3eOK
xnB8QzuWlpM5H/OT0rFiR9UFOKyzMbm/M8lm01gPcSiBq4bGD9+Uuj5rUHNnHTW9
nDHGxr9wkQB6CkSyU/ikGwoT9x3H2Cz6LIQLITIz1Qz62Z8Syi4ZOgkpuUhKUHsY
ANzx6SeyUiXu3KqsKmZ8dm+N1z5xM32Ib/1BtkrfudJNpAU8Y6tkBm8VZVvb7+mz
B3QMfPpG5hzucmR1q4y6AOWD5NBXaVW+H97p6QGPRPJiqlXVWglF50tDB8qEcSp1
OWauuNBX3TQV+lDMnzf13FQuKTHYxABirP7W4kc7nnBZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:06 2024 by rpki-client on console-fra.rpki-client.org